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(57) Abstract: A computerised identity matching management 
process for the supply of a pharmaceutical substance to an 
authorised person. The process identifies a person who is 
requesting the supply of the substance which includes the steps 
of a management computer receiving a request, from capture 
apparatus waiting to commence a biometric capture process 
representative of the person to initiate the capture process. 
The management computer responds to the request to return a 
message to the capture apparatus at a first instant in time, the 
message containing a unique code, and receipt of the message 
containing the code at the capture apparatus causes initiation of 
the capture process. The management computer, after returning 
the message, receives a captured biometric representative of 
the person from the capture apparatus coded with the code, at 
a second instant in time. The management computer operates, 
when the second instant is less than a predetermined time later 
than the first instant, to decode the captured biometric and initiate 
a matching process to find a match for the decoded captured 
biometric against stored biometric records and to retrieve an 
identification code representative of the person when a match 
is found. The management computer retrieves a date stamp and 
uses the identification code to retrieve a data record of the person 
which includes at least a substance the person is prescribed, a 
quantity in which the substance is to be supplied and a date at 
which the substance is to be supplied and determines whether 
the date stamp matches the date at which the substance is to be 
supplied. If a match is determined, the substance is supplied in 
the prescribed quantity and information is recorded to form a 
record to update the supply of the substance to the person. 
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(57) Abstract: A computerised identity matching management 
process for the supply of a pharmaceutical substance to an 
authorised person. The process identifies a person who is 
requesting the supply of the substance which includes the steps 
of a management computer receiving a request, from capture 
apparatus waiting to commence a biometric capture process 
representative of the person to initiate the capture process. The 
management computer responds to the request to return a message 
to the capture apparatus at a first instant in time, the message 
containing a unique code, and receipt of the message containing 
the code at the capture apparatus causes initiation of the capture 
process. The management computer, after returning the message, 
receives a captured biometric representative of the person from the 
capture apparatus coded with the code, at a second instant in time. 
The management computer operates, when the second instant is 
less than a predetermined time later than the first instant, to decode 
the captured biometric and initiate a matching process to find a 
match for the decoded captured biometric against stored biometric 
records and to retrieve an identification code representative of 
the person when a match is found. The management computer 
retrieves a date stamp and uses the identification code to retrieve 
a data record of the person which includes at least a substance 
the person is prescribed, a quantity in which the substance is to 
be supplied and a date at which the substance is to be supplied 
and determines whether the date stamp matches the date at which 
the substance is to be supplied. If a match is determined, the 
substance is supplied in the prescribed quantity and information 
is recorded to form a record to update the supply of the substance 
to the person. 
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"Management control of pharmaceutical substances'* 

Technical Field 

The invention concerns a computerised identity matching management process 
5 and system for the authorised supply of a pharmaceutical substance to an individual. 

Background Art 

The concept of iris recognition was developed and patented by Iridian 
Technologies Inc, and their concept patent US 4,641,349 describes the use of the iris to 
10 identify individuals. US 5,291,560 describes a method by which a biometric, including 
the iris pattern of an individual, can be used as the basis of an identification technique. 

Argus Solutions Pty Ltd, developed a computerised identity .matching 
management process and associated system. Their patent application 
PCT/AU02/01579 describes managing the provision of identity matching services, for 
1 5 instance to enable users to gain appropriate access to service provider's facilities. 

Disclosure of Invention 

In a first aspect, the invention is a computerised identity matching management 
process for the supply of a pharmaceutical substance to an authorised person, the 
20 process comprising the steps of: 

identifying a person who is requesting the supply of the substance, comprising 
the steps of: 

a management computer receiving a request, from capture apparatus 
waiting to commence a biometric capture process representative of the person to 
25 initiate the capture process; 

the management computer responding to the request to return a message to 
the capture apparatus at a first instant in time, the message containing, a unique code, 
and where receipt of the message containing the code at the capture apparatus causes 
initiation of the capture process; 
30 the management computer, after returning the message, receiving a 

captured biometric representative of the person from the capture apparatus coded with 
the code, at a second instant in time; and 

the management computer operating, when the second instant is less than 
a predetermined time later than the first instant, to decode the captured biometric and 
35 initiate a matching process to find a match for the decoded captured biometric against 
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stored biometric records and to retrieve an identification code representative of the 
person when a match is found; 

retrieving a date stamp and using the identification code to retrieve a stored data 
record of the person which includes at least a substance the person is prescribed, a 
5 quantity in which the substance is to be supplied and a date at which the substance is to 
be supplied; 

determining whether the date stamp matches the date at which the substance is 
to be supplied, and 

if a match is determined, supplying the substance in the prescribed quantity and 
10 recording information to form a record to update the supply of the substance to the 
person. 

The pharmaceutical substance may be methadone, levo acetyl methadone 
(LAAM), buprenorphine, or the like. The authorised person to whom a substance may 
be supplied, may therefore be a patient. The substance may be a controlled substance 
15 used in accordance with a pharmocotherapy program. The patient may be using the 
substance in a therapeutic manner as a way to reduce harm associated with a 
dependence on mood altering chemicals. 

The matching process may include generating a template image of the decoded 
captured biometric for matching against stored records. 
20 The stored biometric records may include, but not be limited to, a biometric 

enrol template of the left iris, a biometric enrol template of the right iris, and a unique 
customer number. The stored biometric records may further include a portrait image of 
the individual. All biometric records maybe securely stored using a certified 
cryptographic algorithm such as 3DES. All biometric records maybe uniquely keyed to 
25 the hardware on which the database resides using a transformation process. There 
maybe stored biometric records for all individuals who interact with the system from 
groups of individuals including, but not limited to patients, doctors, clinicians, 
prescribers, and systems administrators. 

The biometric records may be stored in a database in the management's 
3 0 computer cache. 

The data records may be logically separate from the biometric records. 

The data records may be physically separate from the biometric records. 

The date stamp may be retrieved from the management computer's internal 

clock. 
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The stored data records may include, but not be limited to, any one or more of a 
patient database, a prescriber database, a drug register database, and a supplier 
database. 

The patient database may include patient details, an assessment record and 
5 prescription details associated with the patient details. For instance, the patient and 
prescription details for each patient may include a 'name and address field', a customer 
identification number field which is the same number that resides in the stored 
biometric records, a 'create date field', a prescription 'issue date field' which indicates 
the date at which the prescription was prescribed, a 'prescribed drug field' to record 

10 one or more substances prescribed to the particular patient; a 'strength &/or quantity 
field' of each substances prescribed to the particular patient; a 'frequency of treatment 
field' which lists the dates, and if necessary the times, at which the each prescribed 
drug may be supplied to the particular patient; a 'drug supply received field' which 
indicates the dates on which the prescribed drug has been supplied; and a 'prescription 

15 duration field' which specifies the date at which supply of the prescribed drug is to 
cease. 

The prescriber database may include a prescriber 'name and address field', a 
'create date field' for the date on which a prescription was prescribed and who the 
prescription was made out to, and a customer identification number field which is the 

20 same number that resides in the stored biometric records. 

The assessment database may record details of the patient including details of 
the patients past and current medical condition. Such an assessment may be made 
before any patient is prescribed medication. 

The drug register database may be a governmental requirement and may be used 

25 for stock taking purposes. For example for particular types of substances such as 
methadone, suppliers such as pharmacists may be required by law to maintain a register 
of the total daily supply of the drug. Therefore, the database may include information 
relating to the quantity of methadone received and supplied on a daily basis, or any 
other time convenient or required period. The database may further include fields such 

30 as the name and address of the supplier of the substance received into stock; the name 
and address of the persons to whom the substance was supplied; the original 
prescription reference number of each person to whom the substance was supplied; the 
name of the prescriber; and the identity of the person making the entry. 

Each of die databases may be linked so that, for example, for any patient, the 

35 prescriber or supplier records which have common fields may be easily retrieved for 
reference. 
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The method may further include the step of enrolling a person into a program so 
that the person is authorised to be receive the substance. In such an example, the step 
of enrolling the person may include: 

a management computer receiving a request, from capture apparatus 
5 waiting to commence a biometric capture process representative of the person to 
initiate the capture process; 

the management computer responding to the request to return a message to 
the capture apparatus at a first instant in time, the message containing a unique code, 
and where receipt of the message containing the code at the capture apparatus causes 
10 initiation of the capture process; 

the management computer, after returning a message, receiving a captured 
biometric representative of the person from the capture apparatus coded with the code, 
at a second instant in time; 

the management computer operating, when the second instant is less than 
15 a predetermined time later than the first instant, to decode the captured biometric; 

generating an identification code representative of the person; and 
storing a biometric record of the person's captured biometric with the 
identification code. 

Prior to storing a biometric record of the person's captured biometric the 
20 management computer may perform a fraud check to ensure the person is not already 
enrolled on the system. 

Having decoded the captured biometric, the management computer may 
transform the captured biometric into an enrolment template in order to store a record 
of the person's captured biometric. 
25 Similarly, the method may include the step of identifying the prescriber who is 

prescribing the substance and identifying the supplier who supplies the substance to the 
person. The supplier may be a pharmacist. 

The step of identifying the prescriber may include the steps of: 

a management computer receiving a request, from capture apparatus 
30 waiting to commence a biometric capture process representative of the prescriber to 
initiate the capture process; 

the management computer responding to the request to return a message to 
the capture apparatus at a first instant in time, the message containing a unique code, 
and where receipt of the message containing the code at the capture apparatus causes 
35 initiation of the capture process; 
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the management computer, after returning the message, receiving a 
captured biometric representative of the person from the capture apparatus coded with 
the code, at a second instant in time; and 

the management computer operating, when the second instant is less than 
5 a predetermined time later than the first instant, to decode the captured biometric and 
initiate a matching process to find a match for the decoded captured biometric against 
stored biometric records and to retrieve an identification code representative of the 
prescriber when a match is found. 

The step of identifying the supplier may include the steps of: 
10 a management computer receiving a request, from capture apparatus 

waiting to commence a biometric capture process representative of the supplier to 
initiate the capture process; 

the management computer responding to the request to return a message to 
the capture apparatus at a first instant in time, the message containing a unique code, 
15 and where receipt of the message containing the code at the capture apparatus causes 
initiation of the capture process; 

the management computer, after returning the message, receiving a 
captured biometric representative of the person from the capture apparatus coded with 
the code, at a second instant in time; and 
20 the management computer operating, when the second instant is less than 

a predetermined time later than the first instant, to decode the captured biometric and 
initiate a matching process to find a match for the decoded captured biometric against 
stored biometric records and to retrieve an identification code representative of the 
supplier when a match is found. 
25 In a second aspect the invention is a computerised identity matching 

management system for the authorised supply of a pharmaceutical substance to an 
authorised person, comprising: 

a data depository for storing records which include, for each person, at least the 
substance a person is prescribed, the quantity in which the substance is to be supplied 
30 and the date at which the substance is to be supplied; 
a computer programmed to: 

receive a request, from capture apparatus waiting to commence a 
biometric capture process, to initiate the capture process to identify a person who is 
requesting the supply of a substance; 
35 respond to the request to return a message to the capture apparatus at a 

first instant in time, the message containing a unique code, and where receipt of the 
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message containing the code at the capture apparatus causes initiation of the capture 
process; 

after returning the message, receiving a captured biometric from the 
capture apparatus coded with the code, at a second instant in time; and 
5 when the second instant is less than a predetermined time later than the 

first instant, to decode the captured biometric; 

an authentication server to perform a matching process to find a match for the 
decoded captured biometric against stored biometric records and to retrieve the 
identification code representative of the person who is requesting the supply of a 

10 pharmaceutical substance when a match is found, the server further retrieving a date 
stamp and using the identification code to retrieve the person's stored data record to 
determine whether the date stamp matches the date at which the substance is to be 
supplied, and if a match is determined updating the person's stored data record relating 
to the supply of the substance in the prescribed quantity to the person. 

15 There are some forms of medication, for example methadone, the delivery of 

which is strictly controlled. Generally it is the government that places strict controls on 
the delivery of such products and the onus is on the dispenser to ensure that the product 
is only supplied to persons who are entitled to receive it, is only delivered in the dose 
that is prescribed, and is only delivered at pre-determined intervals. A further 

20 constraint on the dispenser is the maintenance of dose changes, prescription expiry and 
general patient management issues. Furthermore, for many pharmacists, the delivery of 
methadone therapy to former drug addicts is a time consuming and very stressful part 
of their business because of the tight constraints, which are placed upon them and the 
possible adverse results to the recipient if an incorrect drug or incorrect quantity is 

25 delivered, or if a drug is delivered to the person more frequently that prescribed. 

It is therefore, an advantage of at least one example of the invention that 
pharmaceutical substances are supplied to authorised persons in the correct doses and 
correct time periods. 

A further advantage of at least one embodiment of the invention is that the 

30 individual's transformed biometric data and the individual's patient data is logically 
separate. A further advantage of at least one embodiment of the invention is that the 
identification of an individual is completed via an anonymous procedure. No 
information other than the captured biometric is required to perform a search of all 
enrolled persons. 
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Brief Description of Drawings 

An example of the system will now be described with reference to the 
accompanying drawings; in which: 

Fig. 1 is a schematic diagram of a system used to manage the supply of a 
5 pharmaceutical substance to a patient; and 

Fig. 2 is a flow chart showing the steps a patient seeks the supply of a substance. 

Best Mode for Carrying Out the Invention 

Fig. 1 illustrates a system 100 used to manage the authorised supply of 

10 Methadone to patients and to ensure that the right patient get the prescribed dose at the 
prescribed time. The system 100 includes an Iris Recognition client computer 115 
which is programmed to receive and transmit messages through a firewall 112 and over 
the Internet using the client software 1 08. The software 1 08 resides in the PC 115. The 
software 108 works with PrivatelD software 110 and an iris recognition camera 120 

15 such as the Panasonic BM-ET300 which includes a special lenses to photograph the 
eyes. The Authentication server 140 accepts the iris image(s) which is(are) sent from 
the client software 108. Prior to sending, the client software 108 ensures that the 
images are of sufficient quality for processing by the Authentication Server 140. In 
addition, the server 140 confirms the image integrity and then sends it through the iris 

20 recognition process for verification against biometric records stored in its cache . 145 
which in turn is drawn from the secure database 1 48. 

The Records Database Server 150 stores a patient database 160, a prescriber 
database 180 and a drug register database 190. The patient database 160 include three 
sub records; patient details 165, an assessment record 170 and prescription details 175. 

25 The patient and prescription details for each patient include: 

• a 'name and address field' 

. a Customer Identification Number field (this number is the same number that 
resides in the customers record within the Authentication Server 140. It is 
linked to their biometric templates), 
30 • a 'create date field' 

• a prescription 'issue date field* which indicates the date at which the 
prescription was prescribed. This field is important as the duration period of 
some controlled substances is determined by the date on which they were 
prescribed; 

35 • a prescription registration number 
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• a 'prescribed drug field', to record one or more substances prescribed to the 
particular patient; 

o a 'strength &/or quantity field' of each substance prescribed to the particular 
patient; 

5 o a 'frequency of treatment field' which lists the dates, and if necessary the times, 
at which the each prescribed drug may be supplied to the particular patient; 
o a 'drug supply received field' which indicates the dates on which the prescribed 
drug has been supplied; and 

• a ' prescription duration field' which specifies the date at which supply of the 
10 prescribed drug is to cease. This date corresponds to the last entry in the 

frequency of treatment field. 

The assessment record 170 is created each time a new patient is referred to a 
prescriber for participation on the Methadone program. 
15 . 

The prescriber database 180 includes: 
. a 'name and address field' of the prescriber 

• Customer Identification Number field (this number is the same number that 
resides in the customers record within the Authentication Server 140. It is 

20 linked to their biometric templates for circumstances where the prescriber is 

required to use iris recognition; 
. and a 'create date field' for when the prescriber prescribes a prescription. 

The patient 165, assessment 170 and prescription 175 records are linked for each 
25 patient 

The drug register database 190 includes the following fields: 

• quantity of methadone received; 

• the name and address of the supplier of the methadone received into stock; 
30 • daily quantity of methadone supplied; 

• the name and address of the persons to whom methadone was supplied by the 
pharmacy; 

• the original prescription reference number of each person to whom methadone 
was supplied; 

35 • the name of the prescriber; 

• the balance of methadone in stock after each transaction; 
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• the identity of the person making the entry. 

In this example, some of the components of the system 100, namely the PC 115, 
software 108, 110 and the Iris recognition camera 120 are installed on the client 
5 network 105, which could be a pharmacy or a clinic and the premises of a prescriber. 
Other components of the system 100, namely the Authentication Server 140, its cache 
145 and the records server 150 with its associated databases, are installed on a server 
network 125 remote from the client network 105. 

10 With regard to the pharmacists/clinical facilities, the PC 115 is accessed by 

pharmacists or operators who have the authorisation to dispense or supply methadone 
to patients. The camera 120 is used to at least capture an iris image of a patient who 
presents themselves at the pharmacy for the supply of methadone. 

Fig. 2 illustrates a flow chart which indicates the steps undertaken from when a 

15 patient approaches a Methadone prescriber, step 205, to when the prescribed 
methadone is dispensed to the patient, step 280. After a patient has approached the 
prescriber, the prescriber draws up an assessment form and assesses whether the patient 
qualifies for the methadone program, step 210. If the patient qualifies, then the 
prescriber proceeds to enrol the patient and a prescription is produced, or a referral to 

20 an authorised person (ie: a doctor) so that a prescription can be produced 215. The 
prescription includes details of the patient and the quantity and frequency of 
Methadone to be supplied to that particular patient. If the premises of the prescriber are 
not biometrically enabled, step 225 then the patient is required to take the prescription 
to a pharmacy at the required time 245 whereby the patient is verified in a traditional 

25 manner. 

It is also possible to have an authorised operator scan in a hard copy of a 
prescription from another authorised source (eg: the patient's local doctor). 

If the prescribers premises are biometrically enabled, step 220, then the step of 
enrolling the patient involves creating a record of the patient in the patient database 160 
30 of the record server 150 and of creating an enrolment record in the biometric database 
148 of the Authentication Server 140. At step 230, prescription details 175 together 
with the patient's assessment form 170 are captured and are entered into the appropriate 
records of the patient's database 160. The biometric details of the patient are then 
captured, step 240. 

35 



WO 2004/072870 



PCT/AU2004/000150 



10 

Enrolling the Patient 

Step (a). The client software 108 is launched and captures the Private ID 
software 1 10 to take control of the camera 120 so as to record an image of the patients 
right and left irises. 

5 Step (b). The client software 108 sends a message to the client computer 105 

for a message authentication code (MAC). The client 105 responds to the request and 
issues a MAC. The client software 108 receives the MAC and the Private ID software 
110 commences capture of the patients iris. 

Step (c). To use the Panasonic BM-ET300 camera 120, the patient moves their 

10 head so that they can see both of their eyes in the mirror in the centre of the camera 
head at a distance of approximately 43 to 48 cm (17 to 19 inches) from the lens. The 
camera 120 sends images to the software 108 running on the computer 115. 

Step (d). The PrivatelD software 110 captures a series of digital video images 
of the patients eyes. Image quality metrics within the client software 108 inspect the 

15 images for sufficient quality and iris content to ensure high confidence for a successful 
match outcome. Once a satisfactory images have been culled, the software 108 
provides a feedback signal to inform that the image capture session is complete, this 
usually issues within seconds. If a satisfactory image cannot be captured within the 
allotted time (the default is set at 10 seconds), then the software provides an error 

20 signal. The patient would then have to restart the process of having images of the iris 
captured. 

Step (e). Once captured, the process of creating an iriscode templates for the 
patient begins. The PrivatelD software 110 encrypts the captured image using an 
appropriate cryptographic algorithm. Then it compresses the captured image, codes the 
25 compressed image using the previously issued MAC and assembles a message for 
transmission to the client computer 105. This transmission is handled by client software 
108. 

Step (f). The authentication server 140 receives the message and checks it for 
validity using MAC, that is to ensure it has been received while the MAC is still valid. 
30 The message then has its integrity checked using a checksum, and is decompressed and 
decrypted. It is then passed through a Daugman Algorithm, or similar, to create the 
iriscodes. 

Step (g). The iriscodes are then sent to the authentication server cache 145 to 
ensure that the records do not already exist (Fraud Check). Providing the records do not 
35 already exist, the IrisCode templates and unique customer identification record (and 
optional portrait image) are entered into the database 148 and the cache 145 is updated. 
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The Authentication Server 140 ensures that the unique customer identification number 
entered into the database 148 is correctly associated with the appropriate patient record 
165 in database 160. 

5 Biometric Capture for supply of Methadone 

At some later date, the patient approaches a pharmacy to request the supply of 
the methadone, step 245. The patient is required to be identified by iris recognition and 
proceeds to have their biometric captured, step 250. 

Steps (a) to (f) of the patient admission are repeated. However step (g) in this 
10 circumstance is different. The recognition iriscode templates are sent to the 
authentication server 140 which attempts to match it against all records in its secure 
cache 145. The authentication server 140 returns a result to the client computer 105 
which interprets the result. If the result is a comparison failure, that result is logged 
and the process stops, step 255. The pharmacist checks the frequency of the treatment 
15 field to determine when the drug is prescribed to be supplied. The patient is informed 
of this date. 

If a match is found, step 260, the result indicates that the patient has been 
identified and the authentication server retrieves the relevant patient record data step 
265, and returns to the requesting application 108. If the patient is authorised to receive 

20 the prescribed supply of methadone step 275, the pharmacist checks the quantity and 
strength of the drug and accordingly dispenses to the patient step 280. Should the 
clinic/pharmacy be equipped with an automated dispensing platform, this will then be 
used to dispense the correct amount of Methadone as required 130. The prescribed 
supply will be administered or packaged according to the information on the 

25 prescription. The supply of the drug is recorded in the 'drug supply field' of the 
patients record 160. 

If the date and time stamp does not match the prescription details 270, the 
pharmacist checks the frequency of the treatment field to determine when the drug is 
prescribed to be supplied. The patient is informed of this date. The patient details 165 
30 are updated to reflect the occurrence, step 270. 

It will be appreciated by persons skilled in the art that numerous variations 
and/or modifications may be made to the invention as shown in the specific 
embodiments without departing from the spirit or scope of the invention as broadly 
35 described. The present embodiments are, therefore, to be considered in all respects as 
illustrative and not restrictive. 
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CLAIMS: 

1. A computerised identity matching management process for the supply of a 
pharmaceutical substance to an authorised person, the process comprising the steps of: 

identifying a person who is requesting the supply of the substance, comprising 
5 the steps of: 

a management computer receiving a request, from capture apparatus 
waiting to commence a biometric capture process representative of the person to 
initiate the capture process; 

the management computer responding to the request to return a message to 
10 the capture apparatus at a first instant in time, the message containing a unique code, 
and where receipt of the message containing the code at the capture apparatus causes 
initiation of the capture process; 

the management computer, after returning the message, receiving a 
captured biometric representative of the person from the capture apparatus coded with 
15 the code, at a second instant in time; and 

the management computer operating, when the second instant is less than 
a predetermined time later than the first instant, to decode the captured biometric and 
initiate a matching process to find a match for the decoded captured biometric against 
stored biometric records and to retrieve an identification code representative of the 
20 person when a match is found; 

retrieving a date stamp and using the identification code to retrieve a stored data 
record of the person which includes at least a substance the person is prescribed, a 
quantity in which the substance is to be supplied and a date at which the substance is to 
be supplied; 

25 determining whether the date stamp matches the date at which the substance is 

to be supplied, and 

if a match is determined, supplying the substance in the prescribed quantity and 
recording information to form a record to update the supply of the substance to the 
person. 

30 

2. The process according to claim 1, where the biometric records are securely 
stored within the management computers cache. 



3. The process according to claim 1 or 2, where the stored data records are 
35 logically separate from the biometric records. 
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4. The process according to any one of the preceding claims, where the stored data 
records are physically separate from the biometric records. 

5. The process according to any one of the preceding claims, where the matching 
5 process includes generating a template image of the decoded captured biometric for 

matching against stored biometric records. 

6. The process according to claim 5, where the stored biometric records include a 
biometric enrol template of the left iris, a biometric enrol template of the right iris, and 

10 the identification code. 

7. The process according to claim 6, where the stored biometric records further 
include a portrait image of the person. 

15 8. The process according to any one of the preceding claims, where the stored data 
records include a patient database and a prescriber database. 

9. The process according to claim 8, where the stored data records further include a 
drug register database and a supplier database. 

20 

10. The process according to any one of the preceding claims, further including the 
step of enrolling a person into a program so that the person is authorised to receive the 
substance. 

25 11. The process according to claim 10, where the step of enrolling the person 
includes: 

a management computer receiving a request, from capture apparatus 
waiting to commence a biometric capture process representative of the person to 
initiate the capture process; 

30 the management computer responding to the request to return a message to 

the capture apparatus at a first instant in time, the message containing a unique code, 
and where receipt of the message containing the code at the capture apparatus causes 
initiation of the capture process; 

the management computer, after returning a message, receiving a captured 

35 biometric representative of the person from the capture apparatus coded with the code, 
at a second instant in time; 
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the management computer operating, when the second instant is less than 
a predetermined time later than the first instant, to decode the captured biometric; 

generating an identification code representative of the person; and 
storing a biometric record of the person's captured biometric with the 
5 identification code. 

12. The process according to claim 11, wherein prior to storing a biometric record 
of the captured biometric, the management computer performing a fraud check to 
ensure the person is not already enrolled on the system. 

10 

13. The process according to claim 11 or claim 12, wherein having decoded the 
captured biometric, the management computer transforming the captured biometric into 
an enrolment template in order to store a biometric record of the person's captured 
biometric 

15 

14. The process according to any one of the preceding claims, where the 
predetermined time is determined according to the time required for the biometric 
capture process. 

20 15. The process according to any one of the preceding claims, where the substance 
is a controlled substance. 

16. The process according to any one of the preceding claims, where the method 
further includes the step of identifying a prescriber who is prescribing the substance 
25 comprising the steps of: 

a management computer receiving a request, from capture apparatus 
waiting to commence a biometric capture process representative of the prescriber to 
initiate the capture process; 

the management computer responding to the request to return a message to 
30 the capture apparatus at a first instant in time, the message containing a unique code, 
and where receipt of the message containing the code at the capture apparatus causes 
initiation of the capture process; 

the management computer, after returning the message, receiving a 
captured biometric representative of the person from the capture apparatus coded with 
35 the code, at a second instant in time; and 
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the management computer operating, when the second instant is less than 
a predetermined time later than the first instant, to decode the captured biometric and 
initiate a matching process to find a match for the decoded captured biometric against 
stored biometric records and to retrieve an identification code representative of the 
5 prescriber when a match is found. 

17. The process according to any one of the preceding claims, where the method 
further includes the step of identifying a supplier who supplies the substance to the 
person comprising the steps of: 

10 a management computer receiving a request, from capture apparatus 

waiting to commence a biometric capture process representative of the supplier to 

initiate the capture process; 

the management computer responding to the request to return a message to 

the capture apparatus at a first instant in time, the message containing a unique code, 
15 and where receipt of the message containing the code at the capture apparatus causes 

initiation of the capture process; 

the management computer, after returning the message, receiving a 

captured biometric representative of the person from the capture apparatus coded with 

the code, at a second instant in time; and 
20 the management computer operating, when the second instant is less than 

a predetermined time later than the first instant, to decode the captured biometric and 

initiate a matching process to find a match for the decoded captured biometric against 

stored biometric records and to retrieve an identification code representative of the 

supplier when a match is found. 

25 

18. A computerised identity matching management system for the authorised supply 
of a pharmaceutical substance to an authorised person, comprising: 

a data depository for storing data records which include, for each person, at least 
the substance a person is prescribed, the quantity in which the substance is to be 
30 supplied and the date at which the substance is to be supplied; 
a management computer programmed to: 

receive a request, from capture apparatus waiting to commence a 
biometric capture process, to initiate the capture process to identify a person who is 
requesting the supply of a substance; 
35 respond to the request to return a message to the capture apparatus at a 

first instant in time, the message containing a unique code, and where receipt of the 
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message containing the code at the capture apparatus causes initiation of the capture 
process; 

after returning the message, receiving a captured biometric from the 
capture apparatus coded with the code, at a second instant in time; and 
5 when the second instant is less than a predetermined time lata: than the 

first instant, to decode the captured biometric; 

an authentication server to perform a matching process to find a match for the 
decoded captured biometric against stored biometric records and to retrieve the 
identification code representative of the person who is requesting the supply of a 
10 pharmaceutical substance when a match is found, the server further retrieving a date 
stamp and using the identification code to retrieve the person's stored data record to 
determine whether the date stamp matches the date at which the substance is to be 
supplied, and if a match is determined updating the person's stored data record relating 
to the supply of the substance in the prescribed quantity to the person. 

15 

19. The system according to claim 18, where the data records stored in the data 
depository are logically separate from the biometric records. 

20. The system according to claim 18 or claim 19, where the data records stored in 
the data depository are physically separate from the biometric records which are stored 
within the management computers cache. 

21. The system according to any one of claims 18 to 20, where the stored data 
records include a patient database and a prescriber database. 

22. The system according to claim 21, where the stored data records further include 
a drug register database and a supplier database. 

23. The system according to any one of claims 18 to 22, further comprising a 
30 privacy protection layer between the management computer and at least the capture 

apparatus. 
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